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answer then go ahead and answer. 
THE WITNESS: Understood, yes. 


BY MR. KASS 





Q. Have you ever been excluded from testifying as 


an: Expert: 


A. I have not been excluded from testifying as an 
SX pere. 

Q. Has a court ever rejected your report? 

A. There have been instances I think where some 


of my opinions have been rejected. 


. Do you know how many? 
A. LOO Nee. 
Oi. Now, would you agree that -- would you agree 


that you have expertise in statistics? 


A. Yes, I will. 

Ox And do you have expertise in economics? 

A. Yes. 

oF And expertise in damage calculations? 

Pi. Yes, I do. 

Ox Do you have any expertise in Bitcoin? 

A. I am not an expert in Bitcoin. 

Ox Have you ever previously testified about 
Bieeconi? 

A. I have not. 

Oo. Do you have any training as relates to 
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i} BaLeeouiag 

2 A. E de .net. 

3 eF Do you know how Bitcoin works? 

4 A. I have a general understanding but again I'm 

5 not an expert in Bitcoin. I was retained to -- as a 

6 statistician in this case. 

7 Oi. How did you obtain that general understanding? 
8 A. How did I obtain the general understanding of 
9 what, Bitcoin? 

10 Q. YeSiu 

ia A. I had some high level understanding of Bitcoin 
1? and then I looked at some general literature 

13 information, Google, some online research to offset my 
14 work. 

i Q. Do you have an approximate date when you did 
16 that general investigation or research into Bitcoin? 

ale A. That was pretty much upon having been retained 
18 in this case and I had some research done and then 

19 reviewed the materials. 
20 Os Does your general understanding go to the 
eel mechanical functions of how Bitcoin mining works? 
22 A. I have a rudimentary understanding of that but 
23 I'm not like a -- I don't have expertise on how it would 


24 be done on a day to day basis by actually individuals 
25 Minne Bi eeoun.. 
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1 on Do you understand how a Bitcoin transaction 1s 
2 represented on Bitcoin block chain? 

3 A. What do you mean by that, how is it 

4 represented? 

5 Q. Right. So 1£ I were to show you a copy of a 

6 Bitcoin block chain and I would ask you can you show me 


7 the public address would you be able to do that? 

8 A. I do know what the hexadecimal system used but 
9 | how I can identify the address I would not know. 
10 oF If I identify the transaction IDs would you be 


11 able to do that? 


te A. The transaction IDs for the data that I was 
Le given is not my investigation or my analysis. So that 
14 is what the starting point of the process. 

15 Q. But if I asked you -- if I gave you a copy of 


16 a Bitcoin block chain I asked you to identify the 

Lg transaction IDs for blLoGk 10) 11, wind 12 Gceuld you do 

18 that? 

19 A. I would not be able to do that. I just used 
20 the data that represented the transaction IDs that were 


eal already done. 


ae Q. Do you know what function the transaction IDs 
23 have on the Bitcoin block chain? 

24 A. What function? 

25 QO. Yep. 
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A. They're there to identify each individual 


steps in the process of the mining. 





0. So you don't know like why they're actually 
necessary or what they actually do? 

A. That's correct. I do not know the purpose of 
the whole process. 

0. Do you know how transaction IDs are generated? 

A. The transaction IDS are generated through a 
process, the hashing process, and I looked at the 
Shadders 256 for example. 

IT looked at the hashing example the SHA-256 
and then how transaction IDs are generated with that but 
I did not look at how the process -- I looked at the 
GUEDUE . 

MR. FREEDMAN: The word is SHA-256. 

BY MR. KASS 
Gk: Do you know on the Bitcoin block chain what 


are the input that are then hashed? 


Ai What are the inputs? 

Ou Yes. 

A. On the block chain? 

Or. Let me rephrase that. When you hash something 


the data that you're hashing, what would you call that? 
A. Again I'm not an expert in the generation of 


the Bitcoin themselves but I used the transaction ID 
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a data and Lhe statistical analysis on that. 
2 O. As far as hashing SHA-256 works what's your 
3 understanding as to how SHA-256 works? 
4A A. My general understanding is that 1s generating 
5 a little different definition uniform to equally 
6 distributed output but that is my understanding so I 
r don't know what the hashing process is. That 1s not my 
8 expertise. 
9 O. Do you understand that when you're hashing 
10 data you start with something, you hash it and then you 
ileal get a different outcome; is that correct? 
LZ A. That is correct. That is my understanding of 
1.2 the process. 
14 OF Now, as far as the Bitcoin block chain is 
15 concerned do you know what that something is that is 
16 then being hashed to get my output? Do you know what 
Le the first input before the hashing is? 
18 MR. FREEDMAN: Object to form. 
19 THE WITNESS: In general the hashing -- excuse 
20 me, the process starts with a solution of like a 
oA. mathematical problem but again I'm not a Bitcoin 
Be expert that knows about what the hashing program 
oe does. I just work with the algorithm of what the 
24 hashing does and that is creating some of the 
25 equally uniform distributed data. 
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1 BY MR. KASS 
2 . So you don't have an understanding of the 
3 pune. 
4A A. IT don't have an understanding of how the 


5 process or what the process does. That's the output 


6 that I daaly7e. 


7 on You also don't know what the actual input is? 

8 A. No. I said that already. 

S oF Sorry. Perfect. I wanted to make sure I have 
10 that in the record. Now, you said you had done some 

tea research as to how Bitcoin works. Where did you do that 
iS) research? 

13 | A. What do you mean by where? 

14 Oh. Lel me rephrase that. What were your sources 

15 of data when you were doing your research? 

16 A. That was basically online research. Articles 

17 just using some of the key terms and then I read some of 
18 those articles. Again that was to give me background. 


ie, My opinion themselves are purely based on statistical 


20 calculations. 

Pi. O. Did you Gonduct any == did you vead any bocks 
22 Cn Ba Peer? 

23 A. I did not read any books on Bitcoin. 

24 OL So basically you did Google searches and read 
25 some articles? 
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i A. That's correct and one of the excerpts was 
2 from an E book about Bitcoin. An E book that one of my 
3 research assistants found on what Bitcoin and another 


4 guy I looked at an excerpt of that about the SHA-256 but 


5 I didn't read the entire book. 


6 ©. At any point in time did you speak to somebody 
7 named Andreas Antonopoulos? 
8 A. That name does not sound familiar. 
9 ©; Do you have any expertise in cryptocurrency? 
10 A. E Ge: HOE.. 
ica Q. Do you know how to read computer code? 
19? A. Depends on the code itself. I have some 


dl programming that I did in the past but I am not a 


14 SOUPULEE Drogrammer per se. 

LS O. Have you ever testified about cryptography? 
16 A. IT have not. 

17 on Do you believe that you have expertise in 


18 hashing? 

19 A. The last one was cut off. I didn't hear the 
20 last word. 

2A on Do you believe that you have expertise in 


22 hashing? 


Ze A. In hashing no, I do not. 
24 oO Have you ever testified about hashing before? 
Diss A. I Wave ot. 
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1 C. As a result of thal conclusion are you also 

2 opining that somebody cannot rely on that list? 

3 MR. FREEDMAN: Objection. 

4 THE WITNESS: I mean that is a question that I 
5 did not answer to my analysis. My analysis just 

6 said that something happened to that list but it 

e: does not make any inference about the reliance on 

8 that. It just shows the probability is very small 
9 that that list was generated in the same process 

i) that a lot of the data are coming from in 

sep uniformity but it does not make any statement about 
ile reliance of the list particularly I was never asked 
ie to check on reliance. 

14 My question reliance for what. I was not -- 
15 my analysis did not deal with question of reliance. 
16 BY MR. KASS 
1.7 OR So is it fair to say that you have no opinion 
18 as relates to reliance on that data? 
19 A. I would not reliance on for what. I would 
20 just show that it has anomalous transaction which make 
24, it very likely that some manipulation took place and 
oe that's where my analysis ends. I was not asked to go 
oe into any further I would say analyses with respect to 
24 reliance. 
25 on Because you were not asked to do that 
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additional work you currently have no opinion on that; 


COtESCE? 
A. That as Cornece,. Yes. 
©. Do you have any opinion as to whether the list 


you looked at is a fraud? 
MR. FREEDMAN: Objection. 
THE WITNESS: Whether the list I looked you 
mean -- when you say list I want to make sure that 
we're talking about those three data files with the 
16,404 rows? 
MR. KASS: Yes, correct. 
THE WITNESS: Yes, I mean that was given to me 
as three data sets with those numbers of rows so I 
did not do any analysis if that was fraudulent or 
not. That would be beyond my expertise to draw 
those conclusions. I have no opinion about that. 
BY MR. KASS 

OP Do you have any opinion as to when this 
claimed manipulation occurred? 

A. IT do not have an opinion about that. I did 


not do an analysis about that. 


Ore Do you have any opinion as to who did this 
manipulation? 

A. tL Go Not. 

on What portion of the data was manipulated? 
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1 A. That one goes more into the specifics of my 


2 analysis. By looking at the data I identified what I 


3 called two gaps and that just had a very small number of 
4 transactions. That's where the anomalies happened but 
5 again I'm not a technical expert knowing how 


6 manipulations would be done with these kind of data. 
B But again whatever was done to the data created two gaps 
8 that were anomalous within the overall distribution of 


9 the data I analyzed. 


10 Or So is it fair to say that your manipulation 1s 
ial based on two gaps; correct? 

12 MR. FREEDMAN: Objection. 

alee THE WITNESS: You said my manipulation. I did 
14 nol manipulate the data. 


ali) BY MR. KASS 


16 ‘oF Your conclusion of manipulation was based on 


a7 two gaps in the data? 


18 MR. FREEDMAN: Objection. 

i. 2 THE WITNESS: Yes, I mean my analysis shows 

20 that the two gaps in the data that do not fit in at 
ae all into the remainder of the distribution but 

oe again the manipulation saying my conclusion data 

e3 was manipulated to better handle real certainty but 
24 I don't know technically how the manipulation 

25 happened but if there was manipulation on those two 
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i gaps. 
2 BY MR. KASS 
3 ©. So in other words, it appears like data is 


4 missing; is that fair to say? 


5 A. Again I don't want to speculate but the data I 
6 was given shows that it's anomalous relative to -- take 
7 the two gaps as two defined data portions and there 1s a 


8 data cloud to the left of the first gap and there is a 
C) little island of data between the two gaps and then 
10 after the second gap there is again a large data cloud 


11 so that's how I visualized the data initially and then 


12 saw that gap and within these gaps there is a small 

13 number of formula transactions. 

14 oF Would it be fair to say that it appears like 
L5 data is missing? 

16 A. I mean that would be one possible explanation 


17 about the appearance of gaps. 

18 Q. Do you have any opinion as to the data that is 
19 there and whether the data that was actually there was 
20 manipulated? 

zal A. What do you mean by the data that was there? 
22 o; As you described it there's cloud, gap, cloud, 
oe gap, @l.0ud, Gap, raghe? 

24 A. Yes, pictorial of what the data looked like, 


Zoey correct. 
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il oF I am visual. So I understand there is yaps 
2 there's something missing because you have clouds on the 
3 Side; right? 
4 A. The data -- that is correct. I basically 


5 analyzed the data before, between and after the gap and 


6 the distribution there indicates that something may be 
7 missing, yes. 
8 O. Do you have any opinion as to whether the 


9 cloud data was manipulated, that's my question? 


10 A. The cloud data I did analyze and identified 

11 the distribution but I did not draw any conclusions of 
He 2, something missing there because that wasn't my base of 
13 comparison. 

14 oF Would it be fair to say that you Nave no 

5 opinion as to whether the cloud data was manipulated? 

16 A. I have no opinion because I didn't do any 


ine specific analysis of that. I didn't do any specific 
18 analysis to identify the cloud data had been 

pS. manipulated. 

20 QO. Mr. Boedeker, are you familiar with the name 


D4. Satoshi Nakamoto? 


22 Pn: He is considered the founder of Bitcoin. That 
28 1s something I knew before I started working on this 

24 Case’, 

25 oF Do you have any opinions as to who Satoshi 1s? 





U.S. LEGAL SUPPORT 
www.uslegalsupport.com 


Case 9:18-cv-80176-BB Document 500-10 Entered on FLSD Docket 05/09/2020 Page 14 of 
55 


Stefan Boedeker 
Apa 22.,. 2020 40 





a A. IT do mock. 


2 Q). Are you aware whether Satoshi is known to have 


3 mined specific Bitcoin blocks? 


4 Pe Besides knowing the name in connection with 

5 being the founder of Bitcoin I have no knowledge about 

6 Nakamoto. 

7 Or Have you made any attempt to identify which 

8 Bitcoin were mined by Dr. Craig Wright? 

9 A. I did not. Again I used the list of data and 
10 that was pretty much the universe of my analysis. No 
11 other knowledge or information was utilized except 
12 having a view from the statistical perspective on that 


13 particular data. 


14 Q. Have you made any attempt to identify the 

15 Bitcoin that were mined by Dave Kleiman? 

16 A. T @ad HOt. 

7 Ox Now, you're testifying about the statistical 


18 probability gaps would appear on that list of 


i. transaction IDs that you were provided with; correct? 
20 A. Not just generally that gaps would appear but 
al I looked at the distribution of gaps and then answered 


De the question of likelihood of gaps of a certaan length. 


23 O». You're not testifying as to whether those 
24 transactions IDs actually exist on the Bitcoin block 
25 Ghain: GOrerect? 
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A. The Lransaction IDs in the data that I 
analyzed? 

Q. Yes. 

A. I did not tie that back to the whole Bitcoin 
chain. 

©; You didn't look at the Bitcoin block chain; 
COGBEGCE & 

Py. I did not look at the block chain. 

De And you have no opinion as to whether they 


exist or not, you don't know? 


A. That's correct. I do not know. 
oF Do you have any opinion as to whether those 
Bitcoin or the Bitcoin address -- whether the Bitcoin 


addresses that are reflected by transaction IDs on the 
list that you looked at have any Bitcoin in them on the 
Bitcoin block chain? 

A. I have no opinion about that. I just looked 
at the transaction ID itself without drilling down the 
information contained. 

Q. Do you have any opinion as to whether the list 
of transaction IDs that you looked at reflect the entire 
mining of Bitcoin by one person? 

MR. FREEDMAN: Sorry, Zalman, can you repeat 


that? You cut out f£or me. 
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BY MR. KASS 





;, Sure. Do you have any opinion as to whether 
the list of transaction IDs that you looked at reflect 
the entirety of Bitcoin mined by one person? 

A. I do not have an opinion on that. 

On Now, it's your opinion -- your conclusion is 
that statistically very improbable that those gaps exist 
on the list of transaction ID you saw, is that accurate? 

A. I mean that's actually incorrect because the 
gaps do exist in the data I analyzed. I know I answered 
the question how likely is it given the rest of the 
transaction that these gaps occur rather than saying if 
they occur or not because the fact 1s they do occur at 
leasl in the data I reviewed. 

Ok But it's your opinion that they only occur 
because there was some sort of manipulation? 

A. Looking at the rest of the 16,404 transaction 
IDs that is my conclusion, yes. It does not fit into 
the remainder of the patterns where each of the data 
clouds we talked about earlier surrounding the gaps or 
in the gaps they follow the same statistical pattern. 

Oc Sure. So it's your opinion that it's 
statistically very improbable that it occurred without 
manipulation? 


A. Yes, the last part if you said occurred by 
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res . 

A. That is correct. Statistically very 
improbable. The fact that it did occur has a 
probability of one because the data. Now I basically 
answered the question did that occur by itself. 

Q. You do agree that some things that are 
statistically improbable could happen? 

A. Again as long as the probability of an event 
is not zero it is not impossible. Now I think in my 
declaration or report I have compared it to winning the 
Powerball 31 weeks in a row has about the same 
probability so is that impossible no, but it has a very 
Sttal | prebability of oeGcurming.: 

QO. You're not saying categorical uncertainty that 
never happened? 

MR. FREEDMAN: Objection. 

THE WITNESS: Sorry, did I talk over you? 

MR. FREEDMAN: No, you're good. Go ahead. 

THE WITNESS: That's actually not what I said. 

I did not say that it did never happen. It isa 

very, very, very important distinction. 

Probability talks about the likelihood of something 

occurring and if something has never happened until 


today then it just means that the frequency of 
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words, the union of Lhe e-mail list in Exhibit B is what 
IT used for writing the report. 

©. Right. Okay. But now you just said how you 
did look at the Shadders List which I guess falls into 
some sort of other category; right? 

A. That's another category that I did not use for 
the calculations in my report. 

Q. So in that other category are there any other 
documents like the Shadders document? 

A. There was two other data files. Set of 
three -- two sets of three other data files in 
hexadecimal, decimal and normalized format. 

Ore And what type of data was on those files? 

Ps They were identical in format to the three 
listed on Exhibit B in the sense that it was one column 


of data and thousands of rows of data also. 


Ox Do you know what that data represented? 
A. It's my understanding that that data 
represented other transaction IDs. One of the Shadders 


or Shadders List how you pronounce it. One was labeled 


DK and one was labeled CW. 


Q. But that has nothing to do with your opinion; 
COLrmeGe? 
A. Exactly. Those data were not used in the 


analysis to derive at my opinion. 
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You've: NOt -epilning about the DK List; Gornect? 
That 1s correct. 

And you're not opining about the CW list? 

That. 2S COrrect . 


And you're not opining about the Shadders 


That. 1S COr¥weCct ECO. 
At what point in time were you provided with 
those three files, the Shadders, the DK and the CW? 

A. Let me think about that. It was the week of 
the due date of my report. 

O:: So while you were still drafting your report 


you were provided with those files? 


A. Thal 18 correct. 
Q. Did you conduct any analysis of those files? 
A. I conducted just the distribution analysis but 


then was asked to not do any more work. 
0}. Do you Know why you were told to not do any 
additional work? 

MR. FREEDMAN: Objection. Wait Mr. Boedeker, 
because I think you get -- this is privileged 
information. 

MR. KASS: I'm just asking does he know why 
then I can ask him how he knows. 


MR. FREEDMAN: Why don't we ask him if he has 
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aI any understanding of why beyond conversations oL 
z counsel so you can get there in a safer manner? 
3 MR. KASS: I'll do it your way. Generally I 
4 ask questions my way but I -- just to short 
5 Smiecurt . 





6 BY MR. KASS 


é: Ox Other than conversations with counsel are you 
8 aware of why you stopped conducting that analysis? 
9 A. It was my understanding that it was not -- 


10 would not have been part of the -- 


dl ae MR. FREEDMAN: Mr. Boedeker, sorry, just 

12 answer the question he asked which is do you have 
is an understanding as to why you did not answer the 
14 quesLion outside of conversations you had with 

LS counsel. 

16 THE WITNESS: No, I do not. 


ila BY WR. KASS 


18 or Did you complete any analysis of those three 


19 files? 


20 A. ; Gisd: ier . 

D1. Q. Buk you looed ai them == you booked at them 
22." “V¥ou Gad Some. GOre Gf GiStribubion thing to 16; Comrece? 
23 A. Can Vou Say == 

24 Q. Beck Wp. You Got three tiles; right? You 

25 opened them up and you said you looked at some sort of 
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distribution of those files; is that accurate? 
A. I was about to style a distribution list of 


those files when I was asked to not resume the work. 


Q. So you never actually started that analysis? 

A. I never actually ran the analysis, that's 
COLPCCE . 

OL. Okay, got it. Were there any other files that 


you were provided similar to those three files which 
actually didn't complete the analysis and end up in your 
Peppers 

A. The fourth file that I was provided in that 
context was the file that I was initially provided that 
is where my declaration did opine on that file. So I 
G6 @ total of four files. One of “Ehem 1 aiveady tad. 

©» Got it. Would that be the one that's titled 
hex, short form of the hex? 

A. I did get all three files. I did get hex and 
then I also got the dec and normalized. So there were a 
set of three files as listed in Exhibit B I got and when 
I got what I said earlier I got three files there was 
clear to say there was three sets of three files. 

©. Because you got one set twice? 

A. Li YOu GoOUnt that. ene then. 1 gor four Seas of 
three files and when I'm saying a set of files always 


contain the hex, the dec and the normalized. 
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1 OF Let me just try to make sure I understand. 
2 You got hex, dec, normalized, you got it way back when 
3 right when you started drafting the report; correct 
4 initially? 
e, A. Yes, before I drafted the report even that's 
6 when I started my analysis. Let's put that sometime in 
7 the middle of March probably. 
8 @. Understood. At what point in type do you get 
9 the Shadders List, the DK list and the CW list? 
HG) A. As I said earlier to the best of my 
Ae recollection that was the week of the due date of my 
12 report and I got the three lists that you mentioned 
ae again three different format and then I got the same 
14 files that I had received in March already. 
ils Ox Okay. Now I think I understand. So for 
16 example the Shadders List you got it in the hex, you got 
17 it in a dec and you got it in normalized; correct? 
18 A. That's correct. That's what I meant each had 
12 three files. 
20 Os, Now I got it. It was the same three files in 


21 three different formats nine files altogether? 


22 A. Thee" s Correct. 

23. | Q. Thank you, now I understand. 

24 MR. FREEDMAN: Zalman, Mr. Kass, I apologize 
25 but I was meant to send you I think it was 


U.S. LEGAL SUPPORT 
www.uSslegalsupport.com 


Case 9:18-cv-80176-BB Document 500-10 Entered on FLSD Docket 05/09/2020 Page 23 of 
55 


Stefan Boedeker 


April 22, 2020 61 
il additional five -- I just e-mailed them to you. It 
2 was my mistake. I was meant to send you five other 
3 documents and I just want to make sure you see them 
4 and you may want to take a break and then review 
5 them and we can talk about it later. I want to 
6 make sure you saw them. That was my mistake. 
i, BY MR. KASS 
8 O.. Okay. Well, give me one second. I think 
9 we're going to -- give me one second. Give me one 


10 second. We don't need to take a break. I think I can 


ileal do this on the fly. I just shared another document and 


2 now I'll share the screen. Mr. Boedeker, do you see an 
ape e-mail on this screen? 

14 A. Yes. 

1.5 or Do you see five additional hyperlinks over 


Ly Pigs Yes, I see the additional five, that's 

LS  COrrege . 

19 Oe. Do you know how they ended up in my inbox? 

20 A How these -- this list ended up in your inbox? 
pil ae Wess 

D2 A It seems to have been sent by Mr. Freedman to 
2 you and that's how it got in your inbox. 

24 Oh Do you know how Mr. Freedman got those links? 
25 A. These look like references to some background 
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1 identical Lo the data in the hex file that I had 
2 initially received the analysis of the data would 
2 not have changed. So I did not issue any opinions 
4 about files. 
5 BY MR. KASS 
6 Oz Now, let me ask you. In your report you state 


7 that you checked the data from the hex to the dec to the 


8 normalized; correct? 
9 A. Tet is Correct . 
LO | On Where in your report do you say that you 


11 checked the data from the DEF to the hex? 
Le A. That was done after the report. 
1:8 QO. So in your report you're not offering an 


14 opinion in your report that the data is the same; 


i COLrect ? 

‘la A. The data between DEF and the hex file? 

17 Ox. COLGeGE . 

18 A. That is correct, yes. 

le) MR. KASS: I'm going to do a share screen one 
20 second and I'm going back to your report which I 
al believe was marked as Exhibit 2. 


22 BY MR. KASS 

23 Q. Now, in paragraph 19 you state that -- you 
24 state that -- let me ask you. What do you state in 
25 paragraph 19°? 
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vi A. I can read it or paraphrase it but I tested 


2 the hypothesis that the SHA-256 hashes are approximately 


2 uniformly distributed -- randomly distributed over their 
4 full range and independent. 
5 On Here is my question. When you say that the 


6 SHA-256 hashes which hashes are you referring to? 

7 A. That is the SHA-256 hash in general but then 

8 also in particular the data derived that were in the hex 
9 data, tie. 

10 Ors How did you test your hypothesis in general 

‘lat: that they are approximately uniformly randomly 

12 distributed? 

ee A. The general statement based on some of the 

14 background literature as I say in the next sentence that 
ins a good or any good cryptograph hash should have these 

16 properties i.e., being uniformly distributed. So that's 
17 | coming from the general search that I had done to that 
18 point and then I'm now basically looking at a specific 
19 output which is the 16,404 rows of data in the hex file 
20 and then ultimately transformed and normalized. 

il Technically I looked at the data in the normalized 
22 Lorilee... 
28 Gs, So my question is though is it fair to say 

24 part of your opinion includes a hypothesis that as a 


25 | general rule SHA-256 hashes are approximately and 
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il uniformly randomly distributed over their range and 

2 independent? 

5 Mes =BREEDMANS xXOuU; "CUE OUL. Cal you repeat 

4 the question? 

5 MR. KASS: I just read the first sentence and 
6 asked him did he actually test the hypothesis. 

7 THE WITNESS: In the generality for all data 

8 generated from SHA-256 hashes I did not test it but 
9 I used the information that I had found that any 

a good cryptographic hash should have these 
11 properties as a postulated distribution for hashes 
2 that are generated using SHA-256. The ones I used 
13 were the ones where I was given the data. 

14 | BY MR. KASS 

15 Q. Now we're going to go back to Exhibit B which 


16 is the data considered. Which of these data, Exhibit B 
ile to your report which is Exhibit 4 to this deposition 

18 which -- can you please show me which one of those 

19 sources showed you that the SHA-~256 is uniformly 

20 distributed across the range? 

2 i A. These are the data that they don't make a 

22 statement that a good cryptographic hash should follow 
3 those properties. That 1s something that I got from 

24 background information and then I tested if a particular 


25 outcome of a SHA-256 hash would follow that same 
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1 Droperty. 

2 Q. Right. But the actual underlying assumption 

3 that a SHA-256 would be uniformly distributed you never 
4 tested that, you just read some stuff online after 

5 Googling; correct and that ultimately we find in the -- 
6 this additional list that I got from Mr. Freedman 

7 yesterday? 

8 A. Yes. Again I mean the -- SHA-256 1s an 

) algorithmic way of creating data and that Google book at 
10 to the bottom that link actually talks about this one 

bal sentence I used in my report of desired properties for 
a2 cryptographic properties specifically mentioned the 
1.3 SHA-256. That's where I got that from. 

ia From that point I used that as the 

ims distribution that I will test the data I received 

16 against. Basically the question that would answer then 
17 does that particular data file in its normalized format 
18 does it have uniform distribution. That's what I tested 
19 and £hé tmiiorl Gdrustrroution. which 1s kine of Like the 
2 postulated value in my hypothesis that's what I got 
2A Leone = 
ee ©. I understand you're going into your second 
ye step of the analysis but I really, really Just want to 
24 focus on the first step of the analysis. The first step 
25 of the analysis is we need to establish that SHA-256 Is 
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il uniformly randomly distributed. Do you agree with me on 
2 that that's the first step of your analysis? 

3 A. I do not agree because I never analyzed 

& whether SHA-256 as an algorithm, right, is something 

5 that generates randomly uniformly distributed data 

6 DeIHES: 

7 So I took the literature that says that it 

8 does -- in fact it does generate data that are 

9 distributed uniform. Then I used that uniform 

10 distribution as a testing point but I never went back 

11 and analyzed the algorithm that underlies SHA-256 to 

12. identify that that would generate approximately a 

3 uniformly distfibticed barrier. 

14 Q. Sure. This literature that you looked at is a 
15 book that you found on Google books document; correct, 
16 Humber 2? 

17 A. Yes. That talked about that, yes. 

18 o; Do you understand how the SHA-256 algorithm 

Ls works? 
2 A. Again I'm not a software engineer or program 
eal this but I don't know how it works. I just know what 

22 the output is and how the output was described in 

23 references as approximately uniformly distributed but I 
24 don't know the inner workings of the SHA-256. 

25 O:. Is it fair to say you are solely relying on 
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that Google books document which is number 12 in the 


List. whieh ws Exhibat 4, ne, Bxbibat 5 toe Els 


deposition? 
A. Totally rely on what? 
O.. On Google book that's number 12 on the screen 


share right now? 

A. That book discusses the properties of SHA-256 
and I believe there was one other document that showed 
an example of how SHA-256 can be utilized to generate 


psuedo-random numbers. 


oF Now that document you also found on Google; 
COrrece ? 
A. I mean it's coming through Google. Probably 


on the second list that Mr. Freedman sent. 

on IT don't know 1f£ it's on here. Is it on this 
list? 

A. Let me see. Maybe on the other. It showed an 
example and I have a printout of all of these references 
and it showed an example how SHA-256 generates uniformly 
distributed random numbers. 

Oe Got it. You're accepting as true what is 
written in the books; is that accurate? 

Tis, In this case I do, yes. 

O.. Do you know who the author is of those 


arzrcles or books are? 
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i A. I did not put that to memory so right now I 
Z aon "ic 
2 Qe Do you know if they are a reliable source of 
4 data? 
5 A. I would have to check. I mean here for 
6 example if it's on this list it may be from the 
7 University of Berkeley statistics department. That may 
8 have been one where it shows an example and I do not 
9 recall the authors of the Google -- the book I found on 
10 Google that talks about Bitcoin general information. 
11 Os It's fair to say right now you cannot talk 
ile about whe Che authors were; correct? 
i A. Off the top of my head I don't know. 
14 Ox And you don't know if they're respected 
15 authors either, right? 
16 A. At the moment, I don't. 
1 Ox. You don't know if they're experts in their own 
18 Field? 
19 A. I don't know that at the moment. 
20 Ox But to the extent you've looked at anything 
21. dt “S Going tO: im-one of the three list of documents that 
pe VOW PHROVIded today, correct, that's EBxhiovt B eo ‘your 
23 report, the first e-mail from Mr. Freedman last night 
24 and the e-mail today, there's no more other e-mails I'm 
25 Going LO mee, EO ecez 
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oy A. Of background information? 
2 @.. COLrLece, ves: 
3 A. That 18 correct, yes. 
4 Q. Do you know what SHA-256 means? 
5 A. It's some hash algorithm. I don't know what s 
6 stands for. 
7 ©; Do you know what the 256 stands for? 
8 A. Ll doen't. 
9 O< Do you know how say SHA-256 differs from 


a) SHA-20°? 
iar A. If there exists SHA-20 I don't know. 


Jee, Q. Do you know how SHA-256 is different than any 


ee other hashing algorithm? 


14 a I don't. I have not done any independent 
15 research of hashing algorithms. 
16 Ox Is it fair to say you have no independent 


17 knowledge as to whether the SHA-256 in fact produces an 
ss) independent equally distributed random range of numbers 
18 asi GULDUE? 

20 A. Besides the literature that they're referring 
Pal to here I don't because I have not tested it myself. I 
22 have not talked to the I don't know if it's software 

23 engineers or computer scientists who developed this 

24 algorithm about how they can attest to that property. 


25 on You would agree that reading a book is not 
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1 personal knowledge, right, or an online news article? 

2 A. I'm confused by the question. If I read 

3 something in a book and I know about it then why 

4 wouldn't I call it personal knowledge? I mean I could 
5 read a book about quantum mechanics, understand it and 
6 then it becomes my personal knowledge. So it didn't 

7 mean that I have to be the inventor of quantum mechanics 
8 no, but I can still have personal knowledge of quantum 
9 mechanics. Maybe I misunderstood your term. 

10 ois It could be semantics but you did raise 

11 another point. So do you understand how SHA-256 works 
2 and the mechanics of it? 

13 Pixs I only know that what I just testified, what 
14 the oulpul of SHA-256 is and again I don't know what the 
ies inner workings as I previously testified. I want to 

16 just say I need to refill my water here. 

7 MR. KASS: We can take a break if you would 
18 like. 

19 THE WITNESS: Just a quick break. Thank you. 
20 MR. KASS: Not a problem. 
2. (Thereupon, a brief recess was taken.) 
22 MR. KASS: Back on the record. 
25 BY MR. KASS 
24 on Mr. Boedeker, we previously spoke about the 
25 randomness of the output of the SHA-256 hash; correct? 
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1 A. That's correct, yes. 
2 Q. Now I'm going to be asking a slightly more 
3 nuance question. The list of hash values that you 
4 looked at on -- that started with the hex and ended up 
5 in the normalized I'm just going to say the hex. I know 


6 you did analysis of the later one, the closest to pure. 


7 MR. FREEDMAN: Objection. I know there was no 
8 question but you moved on I just wanted to get an 
9 objection to the words "closest to pure." 


10 BY MR. KASS 


11 Ox Fair enough. That list -- the hash values on 
12 the hex list are really transaction IDs for the Bitcoin 
ie bLO6OGe .2hain Correcr.: 

14 A. That's my understanding, yes. 

LS QO. Is it your analysis essentially what is the 


16 Statistical probability that transaction IDs on the 


lin Bitcoin block chain would be uniformly random? 

18 MR. FREEDMAN: Objection. 

IBS, THE WITNESS: Can you repeat the question? I 
20 eon't wealiy =- 


2 dk BY MR. KASS 


we. ©. I'm trying to understand what your opinion is. 
23 So one way to look at your opinion is saying I got a 
24 | list of hex values, hexadecimals that I'm told is a 


2% SHA-256 hash. My understanding is it should be random 
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because SHA-256 hash. I read that online. Data aren't 
random, there's a gap; right? 

Pw. That is correct. Except I have to qualify I 
didn't just read it somewhere online. I found reputable 
sources like the University of Berkeley and that one 
book on Bitcoin such as read online. What the goal of 
the analysis to ask 1f the output, the hash that I got 
generated by SHA-256 do follow that uniform 
diLSGributsom, that 1S ©erreck, yes. 

Q. What 2m Hawineg Gdiirieuley ae Ehec ee Last of 
hexadecimal transaction IDs on the hex file do not 


purport to be a random list of hex outputs or do they? 


A. What do you mean by a random list of hex 
GUc Swe Ss? 

Q. Well, my question is you're testing the theory 
as to what -- of whether it is uniformly distributed; 


right, compared to a random output from a 256 SHA hash; 
Gn rece, 

A. I am testing if the output in the data I 
received what we called the hex file earlier and 
transformed into a normalized file. The transformation 
I did not change the distribution. I just put them into 
a different format like using a fraction versus a 
decimal number. So then I tested if they do followa 


uniform distribution so that was one of the hypothesis I 
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i MR. FREEDMAN: Objection by the way. | 
2 THE WITNESS: Very important. Statistics is 
3 very precise. I did not test an expectation -- 
4 MR. FREEDMAN: Sorry, I was just trying to get 
5 an objection to the 1,500 time the same question 


6 that was asked. I think Rick got it so go ahead. 


z Reanswer the question, please. 
8 THE WITNESS: I have to clarify the question 
9 that Mr. Kass asked because I did not test an 


10 expectation. That's probably why the imprecision 
del. of the question makes it difficult to answer. What 
2 I did test is given data do they follow uniform 

dled distribution. For particular thing I probably 

14 answered about half a dozen times by now also 

Lis referring to my report it turns out that three data 


16 clouds within all the data I analyzed following the 


17 distribution the data as a whole do not follow a 
18 Umar Ont GLC riL bution « 
19 I expressed that as an opinion as a conclusion 


20 that this particular data set has this property. 


21 | The test for uniform distribution is -- cannot be 

ore) rejected for three of the subsets that are very 

25 large but as a whole the anonymous observations 

24 lead to rejection of the hypothesis of uniformity. 
2s There is no step zero or step two, three, four but 


U.S. LEGA SUPPORT 
www.uslegalsupport.com 


Case 9:18-cv-80176-BB Document 500-10 Entered on FLSD Docket 05/09/2020 Page 36 of 
55 


Stefan Boedeker 


Perit 2. 2020 99 
1 just an example of what is stated in my report. 
2 BY MR. KASS 
3 Ox Let's try looking at the report. Let's see if 


4 we can use the words in your report hopefully that will 
5 solve semantics issues. Do you see paragraph 19 of your 


6 EEDGr Ey 


7 A. Yes. 

8 ay You see the first sentence? 

9 A. Yes. 
10 Q. You see where it says "I tested the hypothesis 


11 that that SHA-256 hashes are approximately uniformly 


LZ randomly distributed over their full range and 

13 independent." Did you do that? 

14 A. Say it again, did I do what? 

15 ©. Did you do that? Is what you stated in your 
16 report is it accurate? 

Ly A. In paragraph 18 it ends -- 

18 oe dos 

19 A. Up: the se@erééem. 19 De NOE. OU Of GOnkexe. GO 


20 in 18 I'm describing the data, I'm referring to 16,404 
Dal. transaction IDs. Those are the -- there's a typo in 

22 there that the word "that" is duplicated. Maybe that 

23 threw you off. Now that SHA-256 hashes are referring to 
24 that 16,404 transactions in 18. Then I'm referring back 


25 to the literature saying that overall you would expect 
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al EG £ind that uniromum distwibueton tien T'in Going ance 


2 the test and the test basically shows the results that 


3 you have asked me about in the last several minutes and 
4 just paraphrased basically what 1s in my test -- in my 
5 GEDOPE . 

6 Oi. Again I'm just looking for an answer. Now I 


7 understand. Again I'm just asking about that first 

8 sentence in paragraph 19. I am not asking about the 

9 second sentence. So is it fair to say that now that 

10 when you say you tested that hypothesis you're saying 

ileal you tested that on the 16,404? 

Le A. Yes, that's what -- unfortunately that typo 

fee should be that the SHA-256. That got duplicated. 

14 Oz Now, separately did you ever test the 

dle hypothesis that SHA-256 is in general not the 16,404 are 
16 uniformly Pandomly <a@srribtted, Net Wha yell read in. the 
ey literature, did you test it? 

18 A. t did not test a separate simulation study to 


19 see if the SHA-256 produces those uniformly distributed 


20 numbers. That's where I relied on from the literature. 
21 Gx. Now, when you ran that test on the 16,404 is 
22 it in fact uniformly randomly distributed over their 


aS full range of independent? 
24 MR. FREEDMAN: Objection. 


a5 THE WITNESS: On this 16,404 transaction as I 
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ik explained in paragraph 20 the 16,404 are not 
2 | uniformly distributed but the subsets that defined 
3 by the gaps they are uniformly distributed. 
4 BY MR. KASS 
5 @. But my question was I understand you want to 
6 talk about subsets but my question is over the full -- 
7 randomly distributed over their full range independent. 


8 If I'm saying full range I believe that excludes 


9 Subsets; 1s that accurate? 

10 A. That excludes? 
al: Q). Yes, if I say full range I'm not asking about 
12 subsets, I'm asking the full range. Is it uniformly 


13 distributed across the full range SHA-256, just answer 


14 the gueslilon? 

LS MR. FREEDMAN: Objection. 

16 | THE WITNESS: SHA-256? 

17 MR. KASS: Yes. 

18 THE WITNESS: Produces uniformly distributed 
19 numbers. Let me finish. I'm not done. That 

20 particular data set that I tested does not show 
21 that uniformly property over its entirety. 

oe So one conclusion which I didn't draw because 
2 T'm not an expert in hashing functions is that 

24 whatever generated the 16,404 transaction did not 
25 come from a SHA-256 generator. 


U.S. LGBGAL SUPPORT 
www.uSlegalsupport.com 


Case 9:18-cv-80176-BB Document 500-10 Entered on FLSD Docket 05/09/2020 Page 39 of 
55 


Stefan Boedeker 





April 22, 2020 ane 
1 So that would be one possible conclusion Crom 
2 that because it's not uniform. 
3 BY MR. KASS 
4 Os Or that SHA-256 is not uniformly randomly 
5 distributed across the entire range, it just doesn't 
6 like certain number ranges? 
a MR. FREEDMAN: Objection. 

8 THE WITNESS: That would be in contradiction 
9 to the literature that I looked at and so one of 
10 them including I think it was one from UC Berkeley 

ia showing that SHA-256 can be used as pseudorandom 
Zz number generator I were did not do any further 

L3. | research into that because my question was how does 
14 il look in the data that I was asked to analyze 

15 over all uniformities rejected but the subsets 

16 they're all uniform. 

17 So this is kind of like the observation I had 
18 this is a test I did and that's what I opined. 

19 | BY MR. KASS 

20 Ox I understand. To be clear I'm not asking 

cal about literature now. So from the statistical analysis 


Pe that you did you cannot exclude the possibility that 


a3 SHA-256 produces certain less numbers in certain ranges? 
24 MR. FREEDMAN: Objection. Objection. 
25 THE WITNESS: I did not hear the last part. 
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d BY MR. KASS 
2 QO. You cannot exclude that? 
| A. Say it again. 
4 MR. FREEDMAN: Objection. 
5 BY ME. KASS 
6 ©); Let me start again. I'm not asking about the 
e literature. I'm just asking on the analysis the 
8 statistical analysis that you did. You cannot exclude 


9 the, possibility that SHA-256 descent mabunally -+ 


10 SHA-256 is not a uniformly distribution because it may 
bel: leave certain gaps in certain numbers, it may avoid 

12 certain numbers, it may not like three seven, a number 
de starting with three sevens. 

14 MR. FREEDMAN: Objection. 

gS THE WITNESS: It does not like? 


16 BY MR. KASS 


jay GO). It doesn't generate it. 

18 A. SHA-256 in my understanding is an algorithm 
19 and algorithms do have -- do not have likes or dislikes 
20 in general and so I don't have an opinion about what 

oak that question. To me is -- the anomaly is in the data 


ae that based on this one data set that I analyzed I 
22 concluded on my findings or report on my findings but I 
24 did not look at thousands of other SHA-256 hashes that 


25 were generated to see if it always dislikes all those 
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1 | particular numbers. 

2 MR. KASS; Correct. So thank you. TI think I 
> got my answer. 

4 MR. FREEDMAN: An hour ago. 

5 MR. KASS: Vel, it took me an hour to get 

6 here. It shouldn't have does but it did. 

i MR. FREEDMAN: The record will demonstrate 
8 that's just totally inaccurate. 

9 MR. KASS: I don't agree. The question is 
10 what it is. Now that we got that one out of the 
diel || way. 


lee BY MR. KASS 


le De Do you have any understanding as to -- do you 
14 have any understanding as to whether somcbody who is 

is Mining "on. ‘the Biteeim bleek <chaan, could preter Gertcain 
16 transaction IDs? 

17 A. I have no opinion about that. 

18 OF I'm going to ask you a hypothetical. What if 
19 somebody -- what if somebody's mining Bitcoin and he 


20 really does net like the number three. Could Ehat 
eA person mine Bitcoin avoiding transaction IDs that start 


pee. with the number three? 


23 A. Again I have no opinion about that. 
24 Ox Let's assume that somebody in fact doesn't 
25 like the number three and he mined Bitcoin not with the 
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1 number three. Provided you a list of Bitcoin of 16,404 


2 Bitcoin addresses and there are no number threes, all 

3 right. Are you able -- what can you conclude from that 
4 data? 

5 A. First of all, the number three creates an 


6 overly simplified hypothetical. These Bitcoin 

7 transaction IDs are 64 digit hexadecimal numbers so 

8 where is the number three in there, is it the start, 

9 end, I'm just saying. Over simplified hypothetical in 


10 my Opinion can lead to confusion. 


11 So simply having a preference now for a 64 

ee, digit number or the starting point of one number is 

ile easily tested but I have not done that. I have not seen 
14 any informalion whal preferences and thinking what the 
L5 64 number, 64 digit numbers in hexadecimal format did 


16 not start at the very left most digit number three for 


Le example or any of the 60 different numbers slash symbols 


18 that can make up a hexadecimal number. 

iL? So I didn't do such a test. Therefore I can 
20 not speculate if somebody's preference for certain 

ea, numbers or against certain numbers would have an impact 
22 on what is being created. 

23 QO. Let me -- I'll do another screen share. If 

24 you look at your report you have the chart you see right 
25 there that at least based on this chart -- there are not 
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a many numbers that start with the three. I mean I know 
2 it's imprecise the report that's the general idea, not 
3 many numbers? 
4 A. That is actually a misinterpretation of the 


5 chart. The chart shows the length of a gap and it's the 


6 length of a gap of hexadecimal transaction IDs that were 
7 first transformed to decimal numbers and then 
8 transformed to numbers that are normalized. 
9 The normalization is that process that puts 
10 the numbers between zero and one and then I calculate 
dei the gap between subsequent transaction. So here it 
lee is -- then what I'm looking at is cumulative on the 
13 horizontal access so I am looking at the gaps between 
14 observations Crom Lhe very first one to the very last 


15 one. That's what I'm plotting in this chart. 


16 So this particular one has nothing to do with 
17 | Jiking: or net liking number three 16"s Juse shows: that 
18 at some observation somewhere at the end of the left 


19 cloud where all the gaps up to that first point are 
20 very, very close and then there is the next transaction 
A but that is much further away. What 1s measured on the 
22. horizontal axis is actually the sequential numbering of 
26 the gaps -- of the observations and what is measured on 
24 the vertical axis is the height of a gap which has 


25 noting to .d6 With the original hexadeeime! starting 
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it number or ending number. 
2 Oo. Let's just see if we can break this down. So 


3 where it says gap and there's a ball in the air you're 
4 telling me how the gap is from one number to another 


5 number. Is that fair? 


6 A. That 1S correct, yes. 
7 Q. Now, on the bottom where we start out with 
8 0100 and go to 1.00 those are the numbers arranged in 


9 number from smallest to highest? 


10 | A. Those are the transaction IDs after 
“al normalization. So -- obviously I only show two digits 
de here but those are the normalization process creates 


Ls numbers that fall between zero and one. So now the 

14 transaction IDs that start at 64 digit hexadecimal 

15 numbers are now numbers that are between zero and one. 
16 That's what kind of been plotted on the 

17 | horizontal axis and then the blue bubbles or whatever 

18 you call it right they now show each bubble represents 
19 one gap between -- the gaps are always defined as the 

20 difference between two subsequent data points. So we're 
PA really going from ert to right im the IDs in normalized 


22 form and it shows the height of the gap. 


28 On Again Mr. Boedeker, I understand you want to 
24 talk more but I'm really -- I'm just asking please 
25 respond to my question. I broke this down to two 
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things. I first asked about the gap and asked about the 
height you answered it. Then I asked about the 
sequential you went back to talking about the height. 
Again I want you just to respond to my question. 

The numbers that are -- that go from the 
bottom to 0, 0.0 to 1.00. Is there any relationship 
between where the numbers fall on that graph and the 
starting number of hexadecimal number of the hash 
values? 

MR. FREEDMAN: Objection. First of all, to 
the speech. Second of all, again Mr. Boedeker 
answer however you want. Third of all Mr. Kass I 
advise maybe you take a second to understand what a 
normalized number is because you seem to be making 
a mistake you're not understanding. 

BY MR. KASS 

Oi Actually Vel I"m pretty sure that -- ‘we don't 
have to make comments in this deposition. I understand 
that -- Mr. Boedeker, is there a relationship between 
the two? 

A There is a relationship between the two that I 
just explained that on the horizontal axis all of those 
numbers are normalized decimal -- there's hexadecimal. 
That's what I'm starting with. I am transforming them 


to decimal numbers and then I am normalizing them. 
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So each number on the horizontal axis 
represents one number that started as a hexadecimal 
number. 

Oe Right. So if somebody was avoiding a certain 
hexadecimal number in its entirety whatever number would 
you expect there to be a gap once you normalize it and 
sort it from largest to small and by number I want to be 
clear just the first number. If he was avoiding a 
hexadecimal he just doesn't like threes so he is 
avoiding a first number of a hexadecimal when you 
normalize it and sort it would you expect to see a gap 


when you have sufficiently large number of transactions? 


A. First of all, I don't know what you mean by 
avoiding. 
O. When someone 1S mining, right, we spoke about 


hypothetical someone could mine hypothetically they 
could decide the transaction IDs they do not want them 
to be a certain number. They do not want them to be 
number three for whatever reason. I'm asking you if 
that person mined 16,444 Bitcoin or blocks, okay, and in 
his hex numbers there are no threes because he doesn't 
like three. If you normalize the data and put it on the 
scale would you expect to see a gap over there? 

A. tT mean I have not done that analysis at all so 


I right now I would have to do an analysis to look at 
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1 data to opine on that and I don't want to speculate on 

2 gaps here. 

3 Q. So that's not included in your opinion, you 

4 have not factored that in? 

5 A. Someone else was talking, sorry. 

6 MR. FREEDMAN: I was just stating an 

7 objection. Also Mr. Kass, I need to take a 

8 restroom break so can we please after he answers 

9 this question let's take five. 

10 MR. KASS: I think we're very close to getting 
11 there. I am fine in the next few minutes I want to 
12 wrap this up one section up. If you just wait five 
13 or ten minutes, hopefully won't not take long. 

14 MR. FREEDMAN: I need a restroom break. I 

15 can't wait five min minutes. 

16 MR. KASS: Get an answer shortly. 

17 MR. FREEDMAN: We will stop. Answer the 

18 question. 

19 THE WITNESS: I will answer the question and I 
20 said that I did not take into account personal 
21 preference in picking hexadecimal numbers or do any 
22 close analysis of the impact of personal 

23 preferences on the hexadecimal numbers after 

24 they're being transformed to normalized numbers and 
25 therefore I don't have an opinion and I further 
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1 said that I don't want to speculate on what -- such 
2 an analysis I have not yet conducted. 

3 MR. KASS: Thank you for that answer. Vel, 

2, you can have your bathroom break. 

5 MR. FREEDMAN: Thank you. 

6 (Thereupon, a brief recess was taken.) 

fi BY MR. KASS 

8 C. Mr. Boedeker, do you remember testifying that 
9 your basis for as far as knowledge as to the uniform 

aE) random distribution of SHA-256 output you consulted a 

alma book that you found on Google and some sort of resource 
1.2 from Berkeley University; correct? 

13 A. That 1S correct. 

14 oF And for you in Lacl Berkeley University you 

ABs felt that was a good source and reliable source; 

16 COLrueor? 

17 A. That "Ss -Gerreet.. 

L@ (Defendant's Exhibit No. 7 was 

12 marked for identification. ) 

20 BY MR. KASS 
Pal Or. I am going to introduce as I believe we're up 
22 to number seven and I actually have a PDF but it's 
23 essentially -- let's do it like this. Give me one 
24 second. 
25 Here in the Berkeley link you see it on number 
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Ae three on the e-mail I got from Mr. Freedman today and 


2 now I am going to actually show you the Web site where 


3 you can see it online and the actual document is going 
& to be Exhibit 7. I will stop share for a second so I 
5 can swap. Mr. Boedeker, do you recognize this lecture 


6 22 DAapEer? 


yi A. That is -- I mean John Canny is the name I 
8 remember lecture 22 that looks familiar. 

9 Ox Do you know who John Canny is? 
ly A. I suppose he is a professor at Berkeley. 
11 | O: Do you know how long he's been teaching at 


ie Berkeley? 


il A. I do not know that. 

14 ey Do you know if he is a could he be an 

15 ] adjunct professor? 

16 A. T have not done any biographical research on 


Ly Mr. OY DF. Canny so I Gon'’t. know. 


18 Q. Do you know for what class this paper was 


19 presented? 


20 A. I do not know. CS so it may come from the 

Pal computer science department but that would be 

22 speculation on my part. 

Eee: en Do you see anywhere on this page where it says 


24 SHA-256 and I'll actually make it easier for you I'll do 


25 a 256 search. Do you see any results for 256? 
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dl Piss Right now nothing popped up so -- 
2 O. Now, let's just focus on the first page, the 
3 last paragraph. Can you just take a moment to read it 
4 | and I'll ask a question on it? 
5 A. Which paragraph again? 
6 | OF The last paragraph on page number one. The 


y]| one I'm highlighting right now. 
8 A. I ask to take the highlighting off it makes it 


ie) harder to read. Where do you want me to start? 


10 MR. FREEDMAN: Mr. Kass, is there any way you 
11 | can Zoom ina little bit, it's hard for me to read. 
12 MR. KASS: Does that work? 

2 MR. FREEDMAN: Much better. 

14 MR. KASS: See I'm accommodating. 

15 | THE WITNESS: Now you're blocking parts of the 
16 images. The pictures are blocking some stuff. 


iL? BY MR. KASS 


LS Ox. Better now? 

L9 A. This is large enough for me to read. 

o/0 Dix T'll leave it and not touch it. Are you done 
2a reading? 

22 A. Not yet. I had to start over again when you 
23 moved the picture over the text. Okay. Done reading. 

24 @. Is that fair to say they're saying it makes 


25 sense that it should be randomly distributed and then | 
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1 they conclude we're going to assume that to be true? 
2 A. The overall what I take from this particular 


3 paragraph is that they should be and they should not 
4 just be -- when he says I'm asking for more, hoping for 
5 more. Even if the input is not uniform the output 


6 should be uniform. Then he says that henceforth I 


7 | assume this is true. 

8 On But he doesn't actually state as a fact that 
9 it is true? 

10 A. Tt's basically he talks about the property 


ae that it should have and then he assumes it's true. He 
12 | neither proves it is true nor does he prove that it is 
1.3 NOE, EXUE:. 

14 Ok. It's an assumption? 

15 A. That 1S correct. That's what he states at the 


LG very end. 


7 On Okay, thank you. In your report I am going to 
1 use the terminology we used before. If you want to use 
ES some other terminology let me know. It works for me. 


Ab We have the clouds we have the gap cloud gap that's kind 


21 of what we've been using language. Do you know -- you 
22 also kind of at some point numbered the different 

23 transaction IDS: Gorrect? 

24 A. Yes. Sequential number that goes from one -- 
25 which really has no other meaning that being sequential. 
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Gi: Do you know 1f the transaction IDs right 
before the gap starts and after you have three little 
bubbles and do you know what the bookmarks are, the 


transaction ID bookmarks? 


A. The transactional IDs? 
0; Your number, ID, my mistake. 
A. T have to refer to my report and actually I 


have a hard copy and I can tell you the page it's on so 
we can all see it. Actually paragraph 17 on page five 
in the footnote I'm explaining it in page 17 on page -- 


if you want to pull #C up. 


Q. I can do that. 

A. I have a printout. 

Or I also do. So over there it appears that 
you're explaining how you reach -- you're explaining 


your numbering system; correct, in footnote number two? 

A. Ves 

o- But you don't actually state there which are 
the transactions right before the bubble, right before 
the gap or right after the gap? 

A. No, I basically just mention the numbers in my 
numbering scheme which is just purely sequential. I do 
not referring to the actual transaction ID either 
normalized nor the decimal or hexadecimal. 


©. Again I just want to I think may be a 
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il and those are just data points. Through analysis of the 
2 data I gain an understanding of the data. Combine that 
3 with the knowledge of what comes out of SHA-256 

4 algorithm led to my analysis. In order to understand 

5 expected statistical properties of a hashing function 

6 like SHA-256 all that's needed is statistical expertise 
7 but not hashing function expertise. 

8 Oe But you need statistical expertise of what you 
9 would expect to come out of 256 hashing algorithm? 
10 A. Statistical expertise to understand what it 
| 4. means that an algorithm generates uniformly distributed 
12 data points. It might sound trivial but it's in fact 

13 not. If I don't have the specific expertise what it 


14 means then data followed certain distribution I couldn't 


bab have done my analysis. 

16 Or, Like-wise if you didn't know the data was 

17 uniformly distributed you also couldn't have done your 
18 analysis? 

19 A. I could have done my analysis because I can 


20 test or run statistical tests for any kind of 
21. distribution. Just based on additional knowledge about 


22 SHA-256 I tested against the uniform distribution. 


23 QO. If you didn't know that the SHA-256 was 
24 supposed to do uniform even distribution you wouldn't 
25 have been able to reach your conclusion that data was 
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2 A. Tf the distribution of the output of the 

3 SHA-256 could be anything, any distribution, any random 
4 distribution then yes, my distributions might have been 
= different. I still could have concluded that it doesn't 
6 follow uniform distribution. That fact remains 

7 regardless of what the expected output is. 

8 Oe Fair enough. One last line of questions. 


9 Have you ever heard of somebody called Jimmy Song? 


10 A. Can you spell the last name? 

al. BF s=O-NaG. 

1? A. That doesn't ring a bell. 

138 Oo. Do you have any idea who he is? 

14 A. No. 

15 on Do you know what he does for a living? 

16 A. Do I know what? 

Le Oi. What he does for a living? 

1:8 A. T don't know Jimmy Song. For one that is not 
19 a very unigue name. Right now I do not know anyone with 


Zo the name Jimmy Song to the best of my recollection so 


eal therefore I don't know what that particular Jimmy Song 


22 that you refer to does for a living. 

23 MR. KASS: Okay. I am done, Vel, unless you 
24 have anything? 

25 MR. FREEDMAN: I don't think so. We're going 
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to read. 
MR. KASS: Could you get me as fast as 
possible the transcript? 
COURT REPORTER: Vel, do you want a copy? 
MR. FREEDMAN: Sure. Not sure I need it as 
fast as possible. 
(Witness excused.) 


(Deposition was concluded. ) 
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